SHA-1 Deprecation Update [Microsoft]

ronjor · Nov 4, 2015

November 4, 2015 10:00 am by Microsoft Edge Team

In a previous update on TechNet, we announced that Windows will block SHA-1 signed TLS certificates starting on January 1, 2017. In light of recent advances in attacks on the SHA-1 algorithm, we are now considering an accelerated timeline to deprecate SHA-1 signed TLS certificates as early as June 2016
Click to expand...

http://blogs.windows.com/msedgedev/2015/11/04/sha-1-deprecation-update/

Minimalist · Dec 21, 2015

After Microsoft and Mozilla, Google Also Hurries to Block SHA-1 Certificates

Google has made the move that Mozilla and Microsoft have already taken for more than a month, and that's to announce a revised cutoff date for SHA-1-signed certificates.
Click to expand...

http://news.softpedia.com/news/afte...ries-to-block-sha-1-certificates-497942.shtml

Krusty · Jan 4, 2016

Websites and apps have been given the deadline of January 1, 2017 to adhere to new security standards to minimise the risk of hacking and prevent a "mini-Y2K", or have access to their websites taken away.
Click to expand...

http://www.abc.net.au/news/2016-01-04/new-security-standards-for-online/7066428

Minimalist · Nov 17, 2016

Final warning: Popular browsers will soon stop accepting SHA-1 certificates

Starting with Chrome 56, planned to be released to the wider public at the end of January 2017, Google will remove support for SHA-1 certificates. Other browser makers plan to do the same.
Click to expand...

https://www.helpnetsecurity.com/2016/11/17/browsers-stop-sha-1-certificates/

Minimalist · Nov 18, 2016

1/3 of Websites Use SHA-1 Certificates Despite Looming Deadline

In 45 days, Certificate Authorities (CAs) will no longer issue certificates using the SHA-1 cryptographic hash function, but 35% of websites still use such certificates today, a new research from Venafi reveals.
Click to expand...

http://www.securityweek.com/13-websites-use-sha-1-certificates-despite-looming-deadline

ronjor · Nov 18, 2016

SHA-1 deprecation countdown

By Microsoft Edge Team November 18, 2016 10:00 am

Starting on February 14th, 2017, Microsoft Edge and Internet Explorer 11 will prevent sites that are protected with a SHA-1 certificate from loading and will display an invalid certificate warning. Though we strongly discourage it, users will have the option to ignore the error and continue to the website.
Click to expand...

Minimalist · Jan 17, 2017

SHA-1 End Times have Arrived

For the past couple of years, browser makers have raced to migrate from SHA-1 to SHA-2 as researchers have intensified warnings about collision attacks moving from theoretical to practical. In just weeks, a transition deadline set by Google, Mozilla and Microsoft for the deprecation of SHA-1 is up.

Starting on Jan. 24, Mozilla’s Firefox browser will be the first major browser to display a warning to its users who run into a site that doesn’t support TLS certificates signed by the SHA-2 hashing algorithm. The move protects users from collision attacks, where two or more inputs generate the same hash value.
Click to expand...

https://threatpost.com/sha-1-end-times-have-arrived

Log in or Sign up

SHA-1 Deprecation Update [Microsoft]

ronjor Global Moderator

Minimalist Registered Member

Krusty Registered Member

Minimalist Registered Member

Minimalist Registered Member

ronjor Global Moderator

Minimalist Registered Member

Log in or Sign up

SHA-1 Deprecation Update [Microsoft]

ronjor Global Moderator

Minimalist Registered Member

Krusty Registered Member

Minimalist Registered Member

Minimalist Registered Member

ronjor Global Moderator

Minimalist Registered Member

Useful Searches